Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: fWOExru9htaNDN2Yu0FF3u1HSXQMunKiQlbDMWiwTlI=
Subject key identifier: 92:EF:9E:AC:5E:D4:00:60:8E:8F:FD:8D:FB:EF:85:C3:4C:C4:B8:86
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0C44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0C36
Signing time: Fri 28 Mar 2025 18:34:52 +0000
Manifest this update: Fri 28 Mar 2025 18:34:52 +0000
Manifest next update: Fri 04 Apr 2025 18:34:52 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: j+Vt9lcwJkaQrFFZ0SFn387ETR+3twiBDxA/YE5jyc4=)
2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=)
3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023
Validity
Not Before: Mar 28 18:34:52 2025 GMT
Not After : Apr 4 18:34:52 2025 GMT
Subject: CN=67e6ebcc-9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:21:45:13:56:46:48:8c:34:3d:0e:3e:4f:
5a:d5:c7:00:5c:09:47:86:d9:ee:6e:36:10:ef:b0:
3d:b9:a8:6a:d9:8c:99:1f:dc:2e:60:9e:3a:da:3e:
a6:55:92:f5:0e:16:fa:a7:37:a5:64:ed:63:c9:9d:
f3:23:23:b3:a4:18:a4:f0:66:3f:3c:e2:8b:4b:b5:
f0:35:99:d9:ac:34:ca:83:dc:c9:3e:56:f0:16:aa:
03:38:42:14:df:74:43:ce:50:73:e5:d8:c9:60:45:
b1:f3:79:5b:fd:78:88:cf:33:d5:e7:05:ef:f9:db:
61:9f:9b:a2:5c:2c:58:3f:49:0e:a9:ca:16:b5:34:
65:6a:a5:bb:ec:10:63:a7:b6:1f:35:77:c9:d3:97:
9a:f5:39:33:07:b7:bd:2c:c1:78:4b:73:ce:52:ac:
b6:2a:46:c6:8e:80:46:db:d4:49:c8:22:46:97:2a:
bb:82:48:9e:f4:c0:6b:4a:13:f3:19:75:4b:93:22:
10:b5:76:bc:3c:18:8a:36:ec:e7:9c:da:b0:d8:ed:
0c:5f:6c:46:a2:95:ed:f9:fd:fe:e7:bf:42:64:98:
2d:85:f4:16:2c:f3:18:dd:18:72:93:d8:b3:3b:b3:
77:cb:26:db:51:d0:59:3e:79:f1:0e:b5:40:92:50:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:9E:AC:5E:D4:00:60:8E:8F:FD:8D:FB:EF:85:C3:4C:C4:B8:86
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:cc:c1:6d:b8:5c:0e:14:18:6d:9a:2f:fc:ff:c1:1f:0c:
2c:21:2e:ce:f1:ad:97:6f:df:fe:4f:a6:c4:59:38:18:80:99:
5c:02:f2:28:17:a2:a2:81:c0:95:a7:d2:75:ed:50:f7:e6:c5:
36:17:a6:39:96:f0:71:df:f7:55:f1:cc:81:44:04:8d:7d:bc:
6c:4c:49:dd:6a:f2:da:80:6e:3c:7d:e4:4c:75:22:78:29:05:
51:63:3b:f1:1c:e8:b7:04:88:6e:41:84:0c:f1:6d:31:e2:06:
70:50:d7:d9:af:98:a1:e1:84:77:09:0e:ae:92:59:cf:3b:61:
d5:c2:14:1c:00:87:00:67:ff:e5:de:a7:e6:9f:d3:5b:67:34:
55:af:89:b1:1f:83:80:54:c3:4c:ef:7f:eb:83:e1:27:dd:56:
78:80:2d:c4:79:f0:d1:23:33:77:73:e8:56:1f:48:85:f8:88:
a8:29:c4:6b:8a:e7:cd:cd:38:f0:a2:02:61:89:e0:99:02:14:
a9:21:ed:67:fd:c2:93:1c:cf:9a:fb:8b:e5:fa:3f:40:cc:2d:
1d:e0:08:b4:3e:28:2e:ba:e9:06:30:3d:51:aa:26:49:16:f3:
73:f2:5c:e2:4b:c2:8b:f3:22:8b:24:6a:00:40:c2:e5:07:15:
a2:00:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:54:01 2025 by rpki-client